← Database

CVE-2024-4183

MEDIUM CVSS: 4.3 Published: 2024-04-26 Modified: 2026-06-17

Description

Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after flooding the sessions table.

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-400, CWE-770

References